Plenty of US companies have egregious vulnerabilities

Like iRobot recording people on the toilet and uploading the videos?

Yeah, I agree - at least Chinese Roborock gives very granular controls for privacy.

There’s egregious and there’s malicious.